MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a12e8eef819382c30aacec4f6b1949cbf6e170514ef74e35844cc7dedac76215. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a12e8eef819382c30aacec4f6b1949cbf6e170514ef74e35844cc7dedac76215
SHA3-384 hash:	aba0c8337a26de489445ea9bfb6cb0aa53e7b39a7039be13462bd4a2b28fda378794f253f9ae34a9c4ff82701c527466
SHA1 hash:	f122831be090c8a94bf5fbc6077ee182d5911513
MD5 hash:	d48594089ad5b80ebd03798aafbe5f1c
humanhash:	rugby-william-white-robin
File name:	wget.sh
Download:	download sample
Signature	Gafgyt Alert Create hunting rule
File size:	3'885 bytes
First seen:	2025-01-01 06:16:05 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	48:qmR83u5pK2CECpZzg6RvnEbSRMy+W+rEWggr+DJ:qZcpK2FC7gAe8Xxa0J
TLSH	T19C8125BC3D614BB60D15DFE8F226C92B645AD08A45A00F0921BD30F9A8FEF45BF5454B
Magika	shell
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

107

Origin country :

DE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.30790.LX.BOT.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-29.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Linux.Downloader-6.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6774dddf74a2bd296e24eb0blinux22vpnfull_triage

Tags:

phishing mirai

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug busybox evasive

Link:

https://www.filescan.io/uploads/6774dde421835f22e7de94e6/reports/080f8305-f334-4752-bcb5-9a59f56718ee/overview

Nucleon Malprob Susipicious

Score:

68%

Verdict:

Susipicious

File Type:

SCRIPT

Link:

https://malprob.io/report/a12e8eef819382c30aacec4f6b1949cbf6e170514ef74e35844cc7dedac76215

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a12e8eef819382c30aacec4f6b1949cbf6e170514ef74e35844cc7dedac76215/

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-12-31 08:44:36 UTC

File Type:

Text (Shell)

AV detection:

10 of 23 (43.48%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=uexi534bsobmgcvm5rhwwgkjzp3oc4crj33u4nmejtd55wwhmikq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/250101-g11y9azkfm/

Behaviour

Modifies registry class

Suspicious behavior: GetForegroundWindowSpam

Suspicious use of SetWindowsHookEx

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/a12e8eef819382c30aacec4f6b1949cbf6e170514ef74e35844cc7dedac76215